Client Script Based Auth (Ajax Spider)

Signed-off-by: kingthorin <[email protected]>
zaproxy · Jan 27, 2025 · da7a849 · da7a849
1 parent ee233ea
commit da7a849
Show file tree

Hide file tree

Showing 12 changed files with 1,086 additions and 18 deletions.
diff --git a/addOns/authhelper/CHANGELOG.md b/addOns/authhelper/CHANGELOG.md
@@ -4,7 +4,8 @@ All notable changes to this add-on will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ## Unreleased
-
+### Added
+- Added support for Client Script Authentication when used in conjunction with the Ajax Spider add-on.
 
 ## [0.18.0] - 2025-01-27
 ### Changed

diff --git a/addOns/authhelper/authhelper.gradle.kts b/addOns/authhelper/authhelper.gradle.kts
@@ -17,7 +17,7 @@ zapAddOn {
                 dependencies {
                     addOns {
                         register("spiderAjax") {
-                            version.set(">=23.15.0")
+                            version.set(">=23.22.0")
                         }
                     }
                 }
@@ -29,7 +29,10 @@ zapAddOn {
                 dependencies {
                     addOns {
                         register("client") {
-                            version.set(">=0.10.0")
+                            version.set(">=0.11.0")
+                        }
+                        register("scripts") {
+                            version.set(">=45.8.0")
                         }
                     }
                 }
@@ -49,6 +52,9 @@ zapAddOn {
                 register("selenium") {
                     version.set("15.*")
                 }
+                register("zest") {
+                    version.set(">=48.1.0")
+                }
             }
         }
     }
@@ -69,6 +75,7 @@ dependencies {
     zapAddOn("selenium")
     zapAddOn("spiderAjax")
     zapAddOn("client")
+    zapAddOn("zest")
 
     testImplementation(project(":testutils"))
 }
diff --git a/addOns/authhelper/src/main/java/org/zaproxy/addon/authhelper/AuthUtils.java b/addOns/authhelper/src/main/java/org/zaproxy/addon/authhelper/AuthUtils.java
@@ -606,7 +606,8 @@ static SessionManagementRequestDetails findSessionTokenSource(String token) {
         return findSessionTokenSource(token, -1);
     }
 
-    static SessionManagementRequestDetails findSessionTokenSource(String token, int firstId) {
+    public static SessionManagementRequestDetails findSessionTokenSource(
+            String token, int firstId) {
         ExtensionHistory extHist = AuthUtils.getExtension(ExtensionHistory.class);
         int lastId = extHist.getLastHistoryId();
         if (firstId == -1) {